If you would ask me what to do I suggest:
Thank you for sharing your suggestion.
MZ takes the account back and returns payment.
I can refund if current owner is ready for accepting 0.08
BTC instead of 0.08
BTC+0.04
BTC.
OP pays the loan that was taken with the account as they are responsible for the accounts actions.
If it is indeed hacked, OP don't want to pay me.